|
|
@@ -24,6 +24,15 @@ EnableTrustedv4Hosts="yes" |
|
|
|
# Values: no | yes (default) |
|
|
|
Enablev4MSSClamp="yes" |
|
|
|
|
|
|
|
# Enable connection tracking features of netfilter/iptables |
|
|
|
# conntracking allows the firewall to be smart about what |
|
|
|
# packets it allows and refuses. On highly loaded systems or |
|
|
|
# ones with low memory, this may be desirable. Everyone else |
|
|
|
# should probably leave this on. |
|
|
|
# Depended on by: Enablev4NAT |
|
|
|
# Values: no | yes (default) |
|
|
|
Enablev4ConnectionTracking="yes" |
|
|
|
|
|
|
|
# Use /etc/resolv.conf as source for DNS servers that we communicate |
|
|
|
# with as a client. If you turn this off (recommended if on static IP), |
|
|
|
# then you will need to manually define the DNS servers you use. |
|
|
@@ -62,5 +71,6 @@ Enablev4Forwarding="yes" |
|
|
|
# Enable IPv4 NAT/NETMAP rules |
|
|
|
# This allows you to set up NAT rules, SNAT, MASQ, and NETMAP |
|
|
|
# Config file: ipv4/nat.conf |
|
|
|
# Requires: Enablev4ConnectionTracking="yes" |
|
|
|
# Values: no | yes (default) |
|
|
|
Enablev4NAT="yes" |